Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa
File:                     40434e47-10c6-36fa-8978-f24a2be2a3e0.roa (raw, json)
Hash identifier:          z888XDuYNPsHC/tBTP/+ukAtol1vOt6qTIweKFusD+s=
Subject key identifier:   57:B9:5E:B4:7A:B3:09:C6:7D:C9:9E:BD:72:E6:B2:21:9D:8B:F5:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7A75F2A90BB4989B285EC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        2001:559:c4a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:a7:5f:2a:90:bb:49:89:b2:85:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=35eb712d-8a6b-48de-ba22-edf8f2ff4b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:08:93:36:34:b5:2a:27:8f:b0:58:f7:13:
                    f0:81:de:be:3d:0a:b8:31:40:18:f0:57:d5:24:3f:
                    1c:f0:31:7e:98:cb:1d:e6:d5:16:25:91:50:14:cc:
                    b2:5b:41:04:2d:52:43:f3:e3:96:9e:d5:69:00:a3:
                    71:26:82:5e:45:ba:34:68:fe:a9:0c:98:d1:da:ba:
                    1a:6e:26:e4:22:af:48:00:4e:53:73:a9:4b:72:d6:
                    75:b3:db:b6:0f:20:41:0f:63:cd:dc:5a:25:4c:83:
                    76:a3:b9:17:27:e3:9e:0a:fb:c6:9b:50:87:e2:73:
                    2f:ec:34:0e:24:3b:30:22:41:8f:83:72:bd:6e:b9:
                    c4:9d:a0:77:8b:1e:df:50:ae:bf:48:1f:96:c6:df:
                    c9:4d:19:fa:44:11:0c:e2:5c:da:38:f6:c8:d2:97:
                    74:e2:0e:a9:4a:8a:4f:e6:25:7c:1f:bb:02:0d:5a:
                    26:24:2a:34:44:ab:3e:cb:77:85:ac:34:0b:40:5e:
                    a8:fa:50:9b:90:34:ea:24:24:c4:23:79:60:16:c9:
                    23:62:97:b4:24:04:e8:2b:5e:c1:68:e7:74:4f:55:
                    70:0a:6e:26:2b:27:bc:04:0f:4d:df:73:90:97:68:
                    0f:1a:f7:a0:60:35:92:a0:d0:c5:02:03:84:ee:20:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B9:5E:B4:7A:B3:09:C6:7D:C9:9E:BD:72:E6:B2:21:9D:8B:F5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c4a8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b8:c1:a7:bb:ea:32:c3:af:20:1c:8f:28:af:9c:26:b3:74:
         3a:4e:62:c0:f3:90:6c:3b:c0:03:ee:d3:f5:fc:91:6d:b3:a5:
         5f:bc:4a:3a:a4:b3:49:c8:52:c5:7e:a4:3b:bf:8a:95:e6:b3:
         7b:59:70:c9:15:a4:91:a4:2e:71:f9:18:09:04:1b:9f:94:2a:
         77:29:f3:c5:88:14:68:b7:01:ed:41:16:51:e4:02:46:80:68:
         f8:5a:bb:be:23:d8:76:4d:82:1a:07:6f:09:0a:e3:3f:19:05:
         e4:7b:6f:8f:6f:23:79:dc:3f:56:3d:a3:0d:6b:c2:59:92:1e:
         48:49:61:55:a9:01:5f:e0:f8:59:c4:61:df:cc:6c:39:90:3e:
         65:4d:c5:64:ed:b0:44:fe:2d:1c:c4:b1:51:d2:59:3b:4b:41:
         32:49:8a:13:e0:15:f4:69:dc:05:38:df:11:a7:dc:27:bb:f0:
         d2:04:78:56:71:33:bd:ec:18:ba:36:34:51:72:45:b1:51:ad:
         8d:83:5f:1b:24:96:1b:67:4a:70:b3:65:f9:52:b9:91:01:2e:
         a6:b3:f8:99:10:55:da:ca:1c:93:d1:75:47:dc:2a:30:32:b8:
         0c:23:80:58:93:c8:cd:60:09:b7:ca:4e:5c:51:27:f8:22:da:
         4a:e6:39:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:28 2025 by rpki-client